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Abstract Collins and Popescu realized a powerful analogy between several resources in classical and 
quantum information theory. The Collins-Popescu analogy states that public classical communication, 
i^ private classical communication, and secret key interact with one another somewhat similarly to the way 

that classical communication, quantum communication, and entanglement interact. This paper discusses 
the information-theoretic treatment of this analogy for the case of noisy quantum channels. We determine 
a capacity region for a quantum channel interacting with the noiseless resources of public classical 
communication, private classical communication, and secret key. We then compare this region with the 
^^ classical-quantum-entanglement region from our prior efforts and explicitly observe the information- 

^^ theoretic consequences of the strong correlations in entanglement and the lack of a super-dense coding 

,— — I protocol in the public-private-secret-key setting. The region simplifies for several realistic, physically- 

rS^ motivated channels such as entanglement-breaking channels, Hadamard channels, and quantum erasure 

Mh channels, and we are able to compute and plot the region for several examples of these channels. 

'^ PACS 03.67.Hk • 03.67.Pp 

I ^^1 1 Introduction 

CN One of the first breakthroughs in quantum information theory was the discovery of a protocol for es- 

^ tablishing secret correlations with the use of a quantum channel [3] . Such a task is now well known as 

quantum key distribution |40j . This thriving area of research has resulted in a currently available quan- 
QQ turn technology, and efforts are now underway to construct space-to-ground quantum communication 

(y~^ devices 47,38 . 

iy~r These initial results on quantum key distribution inspired the quantum information-theoretic study 

f***^ of secret communication over quantum channels, and this line of inquiry has subsequently led to an 

f^ improved understanding of the relations between private classical information and quantum informa- 

^~~^ tion. Schumacher and Westmoreland were one of the first to study this connection |32] , and Collins and 

J> Popescu then discussed a useful analogy between the classical world and the quantum world [Hj. The 

Collins-Popescu analogy states that the way that a public classical bit, a private classical bit, and a bit 
of secret key interact is qualitatively similar to the way that a classical bit, a quantum bit, and a bit of 
^ entanglement interact [H] . They justify this analogy operationally, by comparing the teleportation pro- 

tocol U to the one-time pad protocol [IH]. Teleportation consumes two classical bits and one maximally 
entangled pair to generate a qubit channel, whereas the one-time pad protocol consumes one public bit 
and a bit of secret key to establish a private classical bit. A qubit channel can establish entanglement, 
and a private classical bit channel can establish a bit of secret key — these protocols have the respective 
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names entanglement distribution and secret key distribution. Additionally, a qubit channel can generate 
a classical bit, and a private classical bit channel can generate a public classical bit [J But the lack of 
an analogy of the super-dense coding protocol [6| in the public-private-secret-key setting is where this 
analogy breaks down. 

Shortly after this initial work, Devetak and Cai et al. independently established the private capacity 
of a quantum channel as one of its fundamental capacities [16, 13_. These results and the ideas involved are 
formally similar to private information transmission in the classical setting p ^ [51 ] [Hl36 l [2] . In addition 
to determining the private classical capacity, Devetak provided a good lower bound on the quantum 
capacity of a quantum channel by showing how to construct good quantum error-correcting codes from 
classical codes that transmit classical information privately [T5]. Devetak and Winter continued these 
efforts, demonstrating many further important connections between private classical information and 
quantum information [19,18 , and Smithed al. then employed these capacity formulas to determine good 
bounds on the secret key rate of the standard protocol for quantum key distribution |46) . 

In this article, we study how a noisy quantum channel interacts with the noiseless resources of 
public classical communication, private classical communication, and secret key. That is, we determine 
trade-off formulas for how a sender and receiver can use any of the noiseless resources to assist a noisy 
quantum channel in generating any of the other noiseless resources. In earlier work, we determined 
trade-off formulas in the setting where the noiseless resources are classical communication, quantum 
communication, and entanglement [5Tl[5ni[^[5D] . Thus, one could view the present work as the completion 
of the information-theoretic treatment of the Collins- Popescu analogy (at least for the case of channels) 
that began in the aforementioned papers and continued in Refs. [17j2X- 

Our main result is the private dynamic capacity theorem. This theorem determines the capabilities 
for a noisy quantum channel to generate any of the three noiseless classical resources when assisted by 
the others. The rates in the private dynamic capacity region can be either positive or negative, depending 
on whether a protocol generates or consumes a given resource, respectively. The result of this theorem 
is that combinations of only four protocols are sufficient to generate the entire capacity region: the 
publicly-enhanced private father protocol [28 . the one-time pad protocol, secret key distribution, and 
private-to-public transmission. This result is in line with the CoUins-Popescu analogy because we found 
that the classically-enhanced father protocol [31', teleportation, entanglement distribution, and super- 
dense coding are sufficient to realize the quantum dynamic capacity region of a quantum channel [ 31a30l 
[291150] . This theorem also explicitly demonstrates the aforementioned breakdown of the CoUins-Popescu 
analogy — the last two inequalities in each theorem are similar by inspection, but the first one in each is 
different because of the lack of a super-dense coding protocol in the public-private-secret-key setting and 
because the rates in teleportation and the one-time pad are different. 

We also explicitly compute and plot the private dynamic capacity region for several realistic, physi- 
cally motivated quantum channels: entanglement-breaking channels |431I25| . dephasing channels, cloning 
channels [TUllSllSlfTT] , and erasure channels [53] . Entanglement-breaking channels have application in en- 
tanglement detection protocols [55115^ . Dephasing noise occurs in superconducting qubit systems [12J, 
the cloning channel represents a natural process that occurs during stimulated emission 37,44,34 . and 
the erasure channel is a simplified model for photon loss [2T ] l49 l [35 l l20 ) . Bradler et al. pointed out in 
Ref. [IT that both dephasing channels and cloning channels are examples of Hadamard channels [3^, 
and this Hadamard property is useful in proving that the private dynamic capacity region is tractable. 
The proof for the quantum erasure channel follows by exploiting its particular structure. We prove these 
results first by showing that a formula, named the private dynamic capacity formula, is additive for each 
of these channels. We then analyze each channel individually and show that a particular ensemble suffices 
to achieve the boundary points of the private dynamic capacity region. 

We structure this paper as follows. We first review the communication model, some definitions, and 
notation that are essential in understanding the rest of the paper. Section [3] states the private dynamic 
capacity theorem and the next two sections prove the achievability part and the converse part. We then 
introduce the private dynamic capacity formula, show how its additivity implies that the computation 
of the capacity region boundary is a tractable convex optimization program, analyze special cases of 
the formula, and compare the region to the quantum dynamic capacity region from Refs. [3011291150] . 
Sections [7] and [8] prove that the private dynamic capacity formula is additive for entanglement-breaking 



^ This latter protocol, that we call privatc-to-public transmission, follows from the particular communication model that 
we consider in this paper. 



channels and the Hadamard class of channels, respectively. We finally compute and plot the private 
dynamic capacity region for dephasing channels, cloning channels, and erasure channels in Section [91 We 
conclude with a discussion and some open problems. 



2 Definitions and notation 

We first establish some definitions and notation that we employ throughout the paper, and we review a 
few important properties of the entropy. Consider a random variable M with a uniform distribution on 
D values. Let <1> denote an embedding of this random variable into a maximally correlated state 

shared between two parties Ma and Mb'- 

771 — 1 

A common randomness bit corresponds to the special case where D = 2. Suppose a third party Eve 
possesses a quantum system E. A state p^aMbE ^j^ |.j^g systems Af^, Mg, and _E is a public common 
randomness state if 

for some state a^ . The above conditions imply that Eve has some correlations with the above state and 
could learn about the random variable M by performing a measurement on her system. A state ui^aMbE 
is a secret key state if 

Trs{c.^-^-*^-^}=^*'"'''", 

^^aMbE ^^M^Mb ^^E^ 

for some state a^ . In this case. Eve cannot learn anything about the random variable M by performing 
a measurement on her share of ^^MaMbE ^ 

A completely-positive trace-preserving (CPTP) map N^ ^^ is the most general map we consider 
that maps from a quantum system A' to another quantum system B (we usually call them "Alice" and 
"Bob"). It acts as follows on any density operator p: 

M^'^^{p) = Y,A,pAl 

k 

where the operators Ak satisfy the condition ^j. A'f.Ak = I. A quantum channel admits an isometric 
extension U^ ^be ^ which is a unitary embedding into a larger Hilbert space. One recovers the original 
channel by taking a partial trace over the "environment" system E (we usually call this system "Eve"). 
One obtains the complementary channel {M'^) by taking a partial trace over the system B. 

A channel is degradable if there is a degrading map T>^^^ such that Bob can simulate the map to 
Eve [T7]: 

V/9 V^^^ o AA-^'^s (p) = (AA^)^'^^ (p) . 

A channel is antidegradable if there is a map f^^^ such that Eve can simulate the map to Bob: 

A channel J\f^Q~^^ is entanglement-breaking if its output is a separable state whenever the input is 
entangled |43U25j : 

X 

Such a channel is antidegradable and the antidegrading map consists of two parts: 1) a measurement of the 
system E that gives a classical variable and 2) a state preparation conditional on the classical outcome of 
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Fig. 1 (Color online) The communication model in this paper. Alice can prepare local states in her lab and choose to 
send them through a noisy channel or dump them locally at no cost in a bin Ex to which Eve has access. We depict the 
isometric extension U^ -^BE ^j ^j^g channel J\f ~*^ and give Eve full access to the environment E of the channel. Bob 
receives the output B of the channel and can process it locally at his end or dump it in a bin E2 to which Eve has access. In 
this model, Alice and Bob can simulate a public classical channel from a private classical channel because Bob can choose 
to dispose quantum states in the bin E2 to which Eve has access. 



the measurement. A quantum. Hadaniard channel is one whose complementary channel is entanglement- 
breaking |32j . It is thus degradable with a similar degrading map that consists of a measurement and 
state preparation. 

We employ a particular model of communication in this paper (depicted in Figure [I]) . We define a 
public channel as one for which an eavesdropper Eve can gain some information about what Alice and 
Bob transmit over it. A private channel is one for which Eve cannot gain any information about what 
they transmit. In this model, we give Eve access to the environment of a noisy quantum channel and 
particular registers that Alice and Bob can discard locally from their laboratories. We do not count this 
discarding as a resource because it results from local actions that Alice and Bob take. This particular 
model allows us to make close contact with result from the classical-quantum-entanglement trade-off [3T1 

We consider a three-dimensional capacity region throughout this work (as in Ref. j30j), whose points 
{R, P, S) correspond to rates of public classical communication, private classical communication, and 
secret key generation/consumption, respectively. For example, the one-time pad protocol corresponds to 
the following point: 

(-1,1,-1), 

because it consumes a public bit and a bit of secret in order to generate a private bit. Secret key 
distribution corresponds to 

(0,-1,1), 

and a private-to-public transmission corresponds to 

(1,-1,0). 
The entropy H {A) of a density operator p^ on some quantum system A is as follows: 

H{A)^^-Tv{p^logp^}, 

where the logarithm is base two. The entropy can never exceed the logarithm of the dimension of system 
A. The quantum mutual information of a bipartite density operator p is 

/ {A; B)^ EE H {A)^ + H (B)^ - H (AB)^ , 

and the conditional quantum mutual information for a tripartite state p is 

/ (A; B\C)^ = H (AC)^ + H (BC)^ - H (C)^ - H (ABC)^ . 



The quantum mutual information obeys a chain rule: 

I{AB-C)^^I{A-C)^^ + I{B-C\A)^. (2) 

A classical-quantum state ct^^be ^j? ^^^ following form plays an important role throughout this 
paper: 

where the states p^y are mixed states and U^^^^ is the isometric extension of some noisy channel 
j^A ~>B ^ Applying the above chain rule gives the following relation: 

I{YX;B)^^I{X;B)^ + I{Y;B\X)^. (3) 

An accessible introduction to concepts in quantum Shannon theory is available in Yard's thesis |52j . 

3 The private dynamic capacity theorem 

The private dynamic capacity theorem gives bounds on the reliable communication rates of a noisy 
quantum channel when combined with the noiseless resources of public classical communication, private 
classical communication, and a secret key. The theorem applies regardless of whether a protocol consumes 
the noiseless resources or generates them. 

Theorem 1 (Private Dynamic Capacity) The private dynamic capacity region Crps (A/") of a quan- 
tum channel J\f is equal to the following expression: 



Cr,ps(AA) = U ICnki^'"')^ (4) 

fc=i 

where the overbar indicates the closure of a set. The "one-shot" region Cj^pg(A/') is the union of the 
"one-shot, one-state" regions C^p^ ^[N) : 

a 

The '^one-shot, one-state'' region C^pg ^{M) is the set of all rates R, P, and S such that 

R + P<I{YX-B)^, (5) 

P + S<I{Y-B\X)^-I{Y-E\X)^, (6) 

R + P + S<I{YX;B)^-I{Y-E\X)^. (7) 

The above entropic quantities are with respect to a classical- quantum state cr^^^^ where 

^XYBE ^ Y^p^^^ (^^y) 1^^ ^^|X ^ |y^ ^y|y ^ c/^'-^^(p^;^), (8) 

and the states p^y are mixed. It is implicit that one should consider states on A instead of A' when 
taking the regularization in 0). 

The above theorem is a "multi- letter" capacity theorem because of the regularization in Q . Though, 
we show later that the regularization is not necessary for entanglement-breaking channels, the Hadamard 
class of channels, or the quantum erasure channels. We prove the private dynamic capacity theorem in 
two parts: 

1. The direct coding theorem below shows that combining the "publicly-enhanced private father proto- 
col" with the one-time pad, secret key distribution, and private-to-public transmission achieves the 
above region. 

2. The converse theorem demonstrates that any coding scheme cannot do better than the regularization 
in Q, in the sense that a scheme with vanishing error should have its rates below the above amounts. 
We prove the converse theorem directly in "one fell swoop," by employing a catalytic, information- 
theoretic approach (similar to the method introduced in Ref. |50j). 



4 Dynamic achievable rate region 

The unit resource achievable region is what Ahce and Bob can achieve with the protocols secret key 
distribution, the one-time pad, and private-to-public transmission. It is the cone of the rate triples 
corresponding to these protocols: 

{a(0,-l,l)+/3(-l,l,-l)+7(l,-l,0):a,/3,7>0}. 

We can also write any rate triple (_R, P, S) in the unit resource capacity region with a matrix equation: 



R 




-1 1 




a 


P 


= 


-1 1 -1 




P 


S 




1 -1 




7 



(9) 



The inverse of the above matrix is as follows: 



-1 


-1 


0] 


-1 


-1 


-1 





-1 


-1 



and gives the following set of inequalities for the unit resource achievable region: 

i? + P<0, 

R + P + S <Q, 

P + S <Q, 

by inverting the matrix equation in ([9]) and applying the constraints a,l3,^> 0. 

Now, let us include the publicly-enhanced private father protocol [H]. Ref. [5S] proved that we can 
achieve the following rate triple by channel coding over a noisy quantum channel M '^^ : 

{I {X;B)^ ,1 {Y-B\X)^ ,-I {Y;E\X)^) , 

for any state (j^^^e q£ ^j^g form: 



x,y 



(10) 



where U^^^^ is an isometric extension of the quantum channel M ^^ . Specifically, we showed in 
Ref. [2S] that one can achieve the above rates with vanishing error in the limit of large blocklength. Thus 
the achievable rate region is the following translation of the unit resource achievable region in ^ : 



R 




-1 1 




a 




nX;B)^ 


P 


= 


-1 1 -1 




P 
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nY;B\x)^ 


S 




1 -1 




7 




-I{Y;E\X) 



We can now determine bounds on an achievable rate region that employs the above coding strategy. We 
apply the inverse of the matrix in Q to the LHS and RHS. Then using the constraints Qf,/3,7 > 0, we 
obtain the inequalities in (5]l7), corresponding exactly to the one-shot, one-state region in Theorem [l| 
Taking the union over all possible states a in ( 10 1 and taking the regularization gives the full private 
dynamic achievable rate region. 
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Fig. 2 (Color online) The most general protocol for generating public classical communication, private classical commu- 
nication, and secret key with the help of the same respective resources and many uses of a noisy quantum channel. Alice 
begins with her public classical register K, her private classical register M, and her share of the secret key in Sa- She 
encodes according to some CPTP encoding map S that outputs a classical register T^, many quantum registers A'", a 
public classical register L, and a private classical register J. She inputs A'" to many uses of the noisy channel J\f ~*^ (with 
isometric extension U^ ~^^^), transmits J over a noiseless private classical channel, and transmits L over a noiseless public 
classical channel. Bob receives the channel outputs B", the private classical register J, and the public classical register L 
and performs a decoding T) that recovers the public and private classical information. The decoding also generates secret 
key with system T^. 



5 Catalytic and information theoretic converse proof 



This section provides a catalytic, information theoretic converse proof of the private dynamic capacity 
region, showing that m gives a multi- letter characterization of it. The catalytic approach means that we 
are considering the most general protocol that consumes and generates public classical communication, 
private classical communication, and secret key in addition to the uses of the noisy quantum channel. 
Figure[2]depicts the most general protocol for generating public classical communication, private classical 
communication, and a secret key with the consumption of a noisy quantum channel A/""^ '^^ and the same 
respective resources. This approach has the advantage that we can prove the converse theorem in "one 
fell swoop." We employ the Alicki-Fannes' inequality, the chain rule for quantum mutual information, 
elementary properties of quantum entropy, and the quantum data processing inequality to prove the 
converse. 

There are some subtleties in our proof for the converse theorem. We prove that the bounds in (5]l7l hold 
for common randomness generation and private key generation instead of public classical communication 
and private classical communication, respectively, because a capacity for generating common randomness 
and a private key can only be better than that for generating public classical communication and private 
classical communication. This setting is slightly different from that depicted in Figure [2j 

We prove that the converse theorem holds for a state of the following form: 



XYBE _ Y^ 



= y ^Px.Yix,y)\x){x\ 



X 



\y){y\''®u^'- 



¥BE/ A' 



iPly). 



x,V 



where the states p'^y are mixed. 

We prove all three bounds in (5ll7). Alice possesses the following classical registers: 



(11) 



1. Two public classical registers K and Ka in the maximally correlated state <P where the dimension 

of both systems is 2"^. The register Ka is for public classical communication. 



—MM A 

2. Two private classical registers M and Ma in the maximally correlated state ^ where the 
dimension of both systems is 2"^. The register Ma is for private classical communication. 

3. One share Sa of a secret key. The shared secret key is in the maximally correlated state <? where 
the dimension of both systems is 2""^. Bob possesses the other share Sb of the secret key. 

Our convention above is that the protocol generates a resource whose rate has an overbar and con- 
sumes a resource whose rate has a tilde. 
The initial state is as follows: 

^MMaKKaSaSb = ^^"^^ ^ ^^^^ ^ ^^■^^«. 

She passes the registers Ka, Ma, and Sa into an encoding map £I^aMaSa^a TaLJ ^ This map outputs 
a classical register Ta of dimension 2"'^, a public classical register L of dimension 2"^, a private classical 
register J of dimension 2"^, and many quantum systems A'" for input to the channel. The register Ta 
is for creating a secret key with Bob. The state after this encoding map is as follows: 

^MKSbA'-^TaLJ ^ gKAMASA^A'^TAL.J,^MMAKKASASB\ 

She sends the systems A'" through many uses N^ ^^ of the noisy channel N^ ^^ , transmits L over 
a noiseless public classical channel, and transmits J over a noiseless private classical channel, producing 
the following state: 

^MKB"E"TaLJSb ^ ^A'"^B"E" ^^MKSbA'"TaLJ\ ^2) 

where U^f ~^^ ^ is the isometric extension of the channel N^ ^^ . The above state is a state of the 
form in (|ll]) with X = KL and Y = MJSbTa- Bob then apphes a map T)B"^SbLJ^TbMK ^j^^^^ outputs 
classical registers Tb,M,K. Let uj' denote the final state. 

The following condition should hold for a catalytic private dynamic protocol that transmits the public 
and private classical data and establishes secret key with e-error: 

^MM ^ ^^^^„ ^ -TaTb ^^rfrMKKE-TATB 11 < ^ (^3) 

111 



^KKE" ,v cr^y^a o+o + Q o,,r.T, fTiof ^y~„S ^KKE'^^x _ rh^^ r<«,i^; + ;«,i L3I 



where p is some state such that Tr^jnjp } = <? . Condition ( |13[ ) implies that Alice and Bob 

establish maximal classical correlations in M and M, in K and K, and in Ta and Tb- The following 
security condition should hold as well: 



^MKE'^TaLJSb _ ^MTaJSb ^ g-KLE" 



1 



where ijj^i^^^TaLJSb jg ^j^g state in (12 1 obtained from tracing over Bob's systems, tt is the maximally 
mixed state, and a^^^ is some state on the public registers and Eve's systems. This security criterion 
implies that Eve cannot learn anything about any of the private data if she has access to all of the public 
data in addition to her registers. It also implies that the following information-theoretic bound holds: 

I{MJSBTA\E''KL)^<t. (14) 

The net rate triple for the protocol is as follows: {R — R,P — P, S — S). The protocol generates a resource 
if its corresponding rate is positive, and it consumes a resource if its corresponding rate is negative. 
We prove the first bound in (Is]) . Consider the following chain of inequalities: 

n{R + P)=I{KM;KM)^^^ 

< I{KM; KM)^, + n5' 
<I{KM;B''LJSb)^ 
= I{KM;B"LJ\Sb)^ 

= H{KMSb)^ + H{B"LJSb)u: - H{KMB"LJSb)^ - H{Sb)u. 

< H{KMSb)u + HiB'')^ + H{LJSb)^ ~ HiKMB''LJSBh - H{Sb)^ 

= IiKLMJSB;B'% - H{KLMJSb)^ + H{KMSb)^ + H{LJSb)^ - H{Sb)^ 
= I{KLMJSb]B'')^ + I{KM- LJ\Sb)u, 

< I{KLMJSbTa\ B'% + I{KM; LJ\Sb)u 
<I{XY;B"%+n{R + P). 



The first equality follows by evaluating the mutual information I{MK: MK) on the state <? (X) <? 



The first inequality follows from the condition in (13) and an application of the Alicki-Fannes' inequality 



where 5' vanishes as e — ^ 0. We suppress this term in the rest of the inequalities for convenience. The 
second inequality follows from quantum data processing. The second equality follows by applying the 
mutual information chain rule in pi and because I{KM; Sb)ui = for this protocol. The third equality 
follows from expanding the conditional mutual information I{KM;B^LJ\Sb)u- The third inequality 
follows by subadditivity of the entropy H{B'^LJSb)uj- The fourth equality follows because 

if(S")„ - H{KMB''LJSb)u, = I{KLMJSb;B")^ ~ H{KLMJSb)u,, 

and the fifth equality follows because 

-H{KLMJSb)u + H{KMSb)u + H{LJSb)u - H{Sb)u = I{KM; LJ\Sb)^. 

The fourth inequality follows from quantum data processing. The final inequality follows from the defi- 
nitions X = KL and Y = MJSbTa and because the quantum mutual information I{KM; LJ\Sb)ui can 
never be larger than the logarithm of the dimension of the classical registers LJ. 
We now prove the bound in ^. Consider the following chain of inequalities: 

n(P + S)=I{MTA;MTB)y^^ 

<I{MTA;MTBh'+nS' 

<I{MTA;B"JLKSBh 

< I{MTa; B"JLKSb)u. - I{MTaJSb;E''KL)^ + e 

= I{MTa] B'^JSbIKL)^ + I{MTa; KL)^ - I{MTaJSb;E^\KL)^ - I{MTaJSb;KL)^ + e 
= I{MTaJSb; B''\KL)^ + I{MTa] JSb\KL)^ ~ liB""; JSb\KL)^ 

+ I{MTa; KL)^ - I{MTaJSb;KL)^ - I{MTaJSb\ E"\KL)^ + e 

< I{MTaJSb; S"|XL)^ - I{MTaJSb;E"\KL)^ + I{MTa; JSb\KL)^ + e 

< I{Y; B^\X)^ - I{Y; E"\X)^ + n{P + S) + e. 

—TaTb —MM 

The first equality follows by evaluating the entropy for the state <1> ® <P . The first inequality 



follows from the condition in (131 and an application of the Alicki-Fannes' inequality where <5' — >■ as 



e — 7- 0. We suppress this term in the rest of the inequalities for convenience. The second inequality follows 
from quantum data processing. The third inequality follows from the bound in (14) on Eve's information. 
The second and third equalities follow from the chain rule for quantum mutual information. The fourth 
inequality follows from quantum data processing I{MTaJSb',KL)^ > I{MTa; KL)^ and the fact that 
I{B"-;JSb\KL)u; > 0. The last inequality follows from the definitions X = KL and Y = MJSbTa 
and because the mutual information I{MTa', JSbIKL),^ can never be larger than the logarithm of the 
dimensions of the registers J, Sb ■ 

We finally prove the bound in ^ . Consider the following chain of inequalities: 

n(R + P + S)= I{KMTA;KMTB)^^y^^ 

< I{KMTa;KMTb)u:' + n5' 
<I[KMTa;B'^JLSb)u 

< I{KMTa;B'\JLSb)^ - I{MTaJSb]E'^\KL)^ + e 

= I{KLMTaJSb] S")^ + / (JLSbiKMTa)^ - I iJLSB;B")^ 
-I{MTaJSb\E'\KL)^ + € 

< I{YX- B")^ - I{Y- £;"|X)„ +n{R + P + S) + e. 

The first equality follows by evaluating the entropy for the state ^ (8)^ ®^ . The first inequality 



follows from the condition in ( 13 ) and an application of the Alicki-Fannes' inequality where (5' — >■ as 
e — > 0. We suppress this term in the rest of the inequalities for convenience. The second inequality 
follows from quantum data processing. The third inequality follows from the condition in (|14[) (note that 



I{MTaJSb]E'^\KL)^ + I{MTaJSb\KL)^ = I{MTaJSb]E''KL)^ from the chain rule and both terms 



on the LHS are non- negative). The second equaUty follows from the chain rule for quantum mutual 
information. The final inequality follows from the definitions X = KL and Y = MJSbTa, because 
I {JLSb',B^)^ > 0, and because the mutual information I {JLSb',KMTa)i^ can never be larger than 
the logarithm of the dimensions of the registers J, L, Sb- 

6 The private dynamic capacity formula 

The private dynamic capacity formula is a particular formula that is relevant in the computation of the 
private dynamic capacity region. If this formula is additive for a particular channel, then the compu- 
tation of the region is a tractable convex optimization program [7^ . The reasoning for this is similar to 
our discussion in Section 6 of Ref. [SD], appealing to ideas from Pareto-optimal trade-off analysis (see 
Chapter 4 of Ref. [7]). Thus, we keep the discussion to a minimum here and instead refer the reader to 
Section 6 of Ref. [50] for further explanations. 

Definition 1 (Private Dynamic Capacity Formula) The private dynamic capacity formula of a 
quantum channel Af is as follows: 

Pa,^ (AA) ee m^xI{YX; B)^ + \[I {Y; B\X)^ - I {Y; E\X)^] + ^i[I {YX; B)^ - I {Y; E\X)^] , (15) 

where A, /i > 0. 

Definition 2 The regularized private dynamic capacity formula is as follows: 

Pfs (AA) ^ lim Ip,,^ (AA««) . 

Lemma 1 Suppose the private dynamic capacity formula is additive for channels Af and M: 

Px,^ {M®M)^ Pa,p (M) + Px.^ [M) . 
Then the regularized private dynamic capacity formula is equal to the private dynamic capacity formula: 

Pr,iAf)^Px.,{Af). 

In this sense, the regularized formula "single-letterizes" and it is not necessary to take the limit. 

Proof The proof is similar to the proof of Lemma 1 in Ref. [50] . 

Theorem 2 Single-letterization of the private dynamic capacity formula implies that the computation 
of the Pareto optimal trade-off surface (the boundary surface) of the private dynamic capacity region is 
a tractable convex optimization program. 

Proof The proof exploits the same techniques as the proof of Theorem 2 in Ref. [50] • 

6.1 Special cases of the private dynamic capacity formula 

We now consider several special cases of the private dynamic capacity formula. These special cases have 
similar geometric interpretations as discussed in Section 6.1 of Ref. |50j . The first case corresponds 
to considering a supporting hyperplane of the capacity region with normal vector (1,1,0), the second 
corresponds to considering a supporting hyperplane with normal vector (0, 1, 1), and the last a supporting 
hyperplane with normal vector (1,1,1). Each of these choices corresponds to singling out only one of the 
inequalities in Theorem [T] and maximizing with respect to that inequality. 

Corollary 1 The private dynamic capacity formula is equivalent to the HSW classical capacity for- 
mula 124\\41^ when A,/i = 0, in the sense that 

maxI{YX;B)^ = max/(X;P)^, 
where 



p^^'^^px(a;)|x) 

X 

id a is a state of the form in TheoremUl 



'M^'^P^' 
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Proof The proof of this statement fohows merely by redefining the joint classical variable XY in the first 
formula to be the classical variable X in the second formula. 

Corollary 2 The private dynamic capacity formula is equivalent to the Devetak-Cai- Winter- Yeung pri- 
vate classical capacity formula tl6\ \13 l in the limit where A — > oo and fj, is fixed, in the sense that 

max [/ {Y; B\X)^ - I {Y; E\X)J = max [/ [X; B) - I (X; E) ] , 

where p is a state of the form in the above corollary and a is a state of the form in Theorem [7} 

Proof The inequality LHS > RHS follows by choosing the distribution px,Y {x,y) = Px {x)py\x {y\^) 

with py\x {y\x) = p*x (y) and px {x) = 5x,xo and choosing the conditional density operators Pxo,y — 

(p*) where the asterisked quantities are optimal for the RHS. The inequality LHS < RHS follows 
because the quantity / {Y; B\X)^ - I {Y: E\X)^ = J2xPx (x) [l (Y; B)^^ - / {Y; E)^J\ and an average 
is always less than a maximum. 

Corollary 3 The private dynamic capacity formula is equivalent to the HSW classical capacity formula 
in the limit where /^ — > (X3 and A is fixed, in the sense that 

m^x[I{YX;B)^-I{Y;E\X)J= max I{X;B). 
'^ {Px(2;),i/Jx} 

Proof The inequality LHS > RHS follows by choosing the distribution px,Y ix,y) — px {x)py\x {y\x) 
with Py\x {y\x) = ^y.yo ^nd Px (x) — p*x {x) and choosing the conditional density operators Px y^ = 
{p*x)^' . The inequality LHS < RHS follows because 

/ {YX- B)^ - I {Y; E\X)^ < I {YX; B)^ < max / {X; B) . 

6.1.1 Comparison between public-private and classical-quantum regions 

We now compare the Devetak-Shor classical-quantum trade-off formula 17J with a special case of our 
above formula that applies to a trade-off between public and private classical communication. We should 
expect these two formulas to be comparable from the CoUins-Popescu analogy because no entanglement 
or secret key is involved. The result is that the public-private region is generally larger than the classical- 
quantum region, but the two regions are equivalent for degradable quantum channels. 

First consider the following refinement of the Devetak-Shor formula (see Section IV-A-4 of Ref. [31]): 

/^ {N) = max/ [X; B) ^ + I {A)BX)^ + pil {A)BX)p , 

where p-^^^ is a state of the form 

p^^^ ^ J2px (x) \x) (x^ ® AA^'-^(0^^'). 

The formula for the pubhc-private trade-off is a special case of the private dynamic capacity formula: 

Pp{N)^maxI{X■,B)^+I{Y■,B\X)^-I{Y■E\X)^ + ^,[I{Y■,B\X)^-I{Y■,E\X)J, 

where a-^^^^ is a state of the form 

^XYBE ^ J2px,y {x,y) \x) {xf ® |y) (yf » U^'^^'^'ipty)^ 
x,y 

Lemma 2 The classical-quantum trade-off formula is never greater than the public-private trade-off 
formula: 

f^ {Af) < P^ W ■ 
11 



Proof The proof techniqiue is similar to that of Lemraa 3 in Ref . [IS] . First let us rewrite the function 
/ so that it is a function on the systems X, B, and E: 

U (AA) = max/ (X; B)^ + I {A)BX)^ + ^/ {A)BX)^^ 

= ma^I{X-B)^ + {^i+l)[H{B\X)^-H{E\X) 

Thus, it is only important to consider the input system A' when evaluating the above formula. Let 

pf =Tr^{0^^'}, 
so that the maximization above is over a state of the following form: 



^^^^ ^Y.P^{x)\x){xf ®U^^^^{p^'l 



where U is the isometric extension of the channel M . Take a spectral decomposition of the states p"^ : 

Px ^^PY\x{v\x)^P^[y, 
y 

where the states ^p^ are pure. Then the following state 0^'^^^ is a particular state of the form ct^^^^: 



x,yl 



such that Try {0} = p^^^ . Consider the following chain of inequalities: 
/ {X; B)^ + {p + 1) \h {B\X)^ - H {E\X) 



p \ \ jp 

= I {X- B), + {p+l) [H {B\X), - H {E\X),] 

= I {X- B)g + (m + 1) [H {B\X), - H (B\YX), - H {E\X), + H {E\YX),] 
= I {X- B), + (/i + 1) [/ (F; B\X), - I [Y- E\X)g] 
< P^ W ■ 

The first equality follows because Try {6} = p-^^^ . The second equality follows because the entropies 
of 9 on systems B and E are equal when conditioned on X and Y . The third equality follows from the 
definition of conditional mutual information. The final inequality follows from the definition of P^ (A/"). 

Lemma 3 Suppose that a quantum channel is degradahle. Then the classical-quantum trade-off formula 
is equivalent to the public-private trade-off formula. 

Proof The proof is again similar to that of Lemma 3 in Ref. [IS] . Consider the state definitions in the 
previous lemma and the definition of a^^^^ from before. Consider a state (j^yzbe ^^ggj^gfj ^g follows: 



XYZBE 



J2 Px.Y {x, y)pz\x,Y {z\x, y) \x) {xf ® \y) (yf ® \z) {zf ® f/^'^''^(<^^'y, J, 



x.y,z 



where p-^y = '^zPz\x,y {z\x,y) <-Px,y,z is a spectral decomposition of p^y. Consider the following chain 
of inequalities that applies to an arbitrary state ct^^^^: 

/ {X- B)^ + (/i + 1) [/ (F; B\X)^ - I {Y; E\X)J 

1) [/ (YZ: B\X)^ - I [Z- B\XY)^ - [I [YZ- E\X)^ - I (Z; E\XY)J\ 

1) [/ {YZ- B\X)^ - I {YZ- E\X)^ - [I (Z; B\XY)^ - I (Z; E\XY)^]] 

\)[I{YZ-.B\X)^-I{YZ-,E\X)^] 

1) [H {B\X)^ - H {B\XYZ)^ - H {E\X)^ + H {E\XYZ)J 

1)[H{B\X)^-H{E\X)J 
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= nx-,B)^ 


+ (m 


= I{X-,B)^ 


+ (m 


<I{X-,B)^ 


+ (m 


= nX;B)^ 


+ (m 


^HX-,B)^ 


+ {p 


< U (A^) • 





The first equality follows by applying the chain rule for quantum mutual information. The second equality 
follows by rearranging terms. The first inequality follows because / {Z; B\XY)^ — I {Z; E\XY)^ > for a 
degradable quantum channel. The third equality follows by expanding mutual informations. The fourth 
equality follows because the entropies of the state a on systems B and E are equal when conditioned on 
X, Y, and Z. The final inequality follows from the definition of /^ (A^)- 

6.1.2 Comparison between quantum dynamic and private dynamic formulas 

We can compare the quantum dynamic and private dynamic capacity formulas for the class of degradable 
channels. The proof exploits the simplified form of the private dynamic capacity formula that results 
from Lemma [6| and the quantum dynamic capacity formula appears in the proof below. 

Lemma 4 Suppose that a quantum channel A/d is degradable. Then the quantum dynamic capacity 
formula can never be less than the private dynamic capacity formula. 

Proof We prove this theorem by showing that 

where -DA,/i(A/'D) is the quantum dynamic capacity formula given by 

-Da.m(A/d) = max/ (AX; B)^ + XI iA)BX)^ + /i [/ {X: B)^ + I {A)BX)^] . 

The state cr^^^^ is a state of the form 

X 

where the states (j)^^ are pure. Suppose that the following state is the one that maximizes P\.^{My)) for 
a given A and /.t: 

Then we choose the states (f>-^^ in a given a^^^^ to be as follows: 



\(l)x)^^ =^\/PY\x{y\x)\y)'^\tpx,v)^ ■ 

y 

We can obtain the state uj^^^^ from the state cr^^^^ by performing a complete dephasing Z\"^^^ 
where the dephasing basis is {\y) {y\}. Then the following inequalities hold 

/ {YX; B)^ + X[H iB\X)^ - H {E\X)J + fi[H [B]^ - H {E\X)J 
= I {YX; B)^ + X[H iB\X)^ - H {E\X)J + fi[H (B)^ - H iE\X)J 

< I {AX; B)^ + X[H {B\X)^ - H {E\X)^] + ^,[H {B)^ - H {E\X)^] 
= I {AX; B)^ + XI {A)BX)^ + ^i[I {X; B)^ + / {A)BX)^] 

< DxA^d). 

The first equality follows because the entropies of uj and a without the Y system are equivalent. The 
first inequality follows from quantum data processing: one can obtain the state uj^^^^ be performing a 
von Neumann measurement of the A system of the state cr^^^^ in the basis {|y) }. The second equality 
follows by rearranging terms. The final equality follows from the definition of D\_^. 

The above lemma explicitly shows how the analogy between the classical and quantum worlds breaks 
down for the case of a degradable channel. The quantum dynamic capacity formula is always larger than 
the private dynamic formula because of the strong correlations in entanglement and because of the lack 
of a super-dense coding protocol in the public-private-secret-key setting. 
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7 Single-letter private dynamic capacity regions for entanglement-breaking channels 

Our first class of clrannels for whicli tfie private dynamic capacity region simplifies is the class of 
entanglement-breaking channels. Shor found that such channels have an additive classical capacity [i5] . 
and we can extend his method of proof to show that the full private dynamic capacity region for these 
channels is single-letter. 

Theorem 3 (Private Dynamic Capacity for Entanglement-Breaking Channels) The private 
dynamic capacity region Cyips(J^eb) of an entanglement-breaking quantum channel M-es is the set of all 
rates R, P , and S , such that 

R + P <uY&yiI{X;B)^, (16) 

P + 5<0, (17) 

R + P + S <n\ayiI{X]B)^. (18) 

The above entropic quantities are with respect to a classical- quantum state a^^ where 

a^^ ^ Y,Px [x) \x) (x|^ ® A/-^B"^(^f ), (19) 

X 

and the states ijj^ are pure. 

We prove this theorem in a few steps. We first show that the private dynamic capacity formula sim- 
plifies dramatically for antidegradable channels (recall that entanglement-breaking channels are a special 
case of antidegradable ones). We then show that this simplified formula is additive for an entanglement- 
breaking channel and this result implies the form of the region in the statement of the above theorem. 

Lemma 5 Suppose that a quantum channel A/ad is antidegradable. Then the private dynamic capacity 
formula simplifies as follows: 

P\,^c (A/ad) = hx,^, (A/ko) , 

where 

/iA,M (A6^d) = (1 + m) max/ (X; B)^ , 

and oj^^^ is a state of the following form: 

X 

and the states ijj^ are pure. 

Proof The inequality Pa, /^ (A/ad) > h\^fj,{AfA'D) follows by carefully choosing the state a^^^^ for the 
maximization on the LHS: choose the distribution px,Y {x, y) — p*x [x) Sy^yg and each state p-^y^ ~ {^p^) 
where the terms with asterisks are optimal for the RHS. The other inequality Pa./jXA/ad) < ^A,/i(A/'AD) 
follows from the following chain of inequalities: 

/ {YX; B)„ + A [/ (F; B\X)^ - I {Y; E\X)J + f,[I (YX; B)^ - I {Y; E\X)J 
<I{YX;B)^+f,I{YX;B)^ 
< ^a.^(A/ad)- 

The first inequality follows because [/ (Y; B\X)^ — I (Y; E\X)^] < (from antidegradability) and by 
dropping the term — /i/ (Y; E\X)^. The second inequality follows because / {YX; B)^ < niax^^ / {X; B)^. 

Corollary 4 The private dynamic capacity formula is additive for an antidegradable channel A/ad and 
an entanglement-breaking channel M-eb- 

Pa,m(A/ad <» AAeb) = Pa,m(AAad) + Pa,p(A/'eb) 
14 



Proof The proof is similar to the proof in Ref. [33] . We first note that the tensor product of an antidegrad- 
able channel and an entanglement-breaking channel is an antidegradable channel. This observation allows 
us to employ the simplified formula in Lemma [5J We employ the following states in the proof: 

^^^ ^ Y,px (x) \x) (o^r ® <r''^ ^^ir^'^^t^') 

X 

= J2px (x) \x) (a:^ ® Ep^I^ (z^Xj^-^H^i) ^ Of^l, 

X z 

u;^^^ ^ J2px {x)pz\x {z\x) \x) {xf ® \z) (z|^ ® ^r'^H^i) ® ^5- 
Consider the following chain of inequalities: 

= (i + M)/(X;Sii?2)^ 

= {l + ^l)[H{B,B^)^-H{B,B^\X)J 

<{l + ^l) [H (B,)^ + H {B2)^ - H {B,B2\XZ)J 

= {l + ^l)[H{B,)^+H{B2)^~HiB,\XZ)^-H{B2\XZ)J 

= {l + ^,)[I{X;B,)^ + I{X■,B,)J 

</^a,m(A/ad) + /Ja,m(M5b) 

The first equality follows from Lemma [5] The second equality follows from the assumption that w is a 
state that maximizes /ia./j(A/'ad®A/'eb)- The third equality follows from the definition of quantum mutual 
information. The first inequality follows from subadditivity of entropy and conditioning does not increase 
entropy. The fourth equality follows because the state to is product when conditioned on both X and 
Z. The fifth equality follows from the definition of quantum mutual information. The second inequality 
follows because the mutual informations arc always less than their maxima, and the final equality follows 
from Lemma [Sl 

Example 1 The private dynamic capacity region of a completely dephasing channel is the set of all R, 
P, and S satisfying the following inequalities: 

R + P< 1, 

P + S <0, 
R + P + S < 1. 

This result follows because the completely dephasing channel is an entanglement-breaking channel with 
public classical capacity equal to one. 

8 Single-letter private dynamic capacity regions for the quantum Hadamard channels 

We now prove that the private dynamic capacity region is additive for the class of quantum Hadamard 
channels. This result is perhaps dual to the above result because Hadamard channels are ones for which 
the map to the environment is entanglement-breaking, and they are degradable with a degrading map 
from Bob to the environment Eve. Our method of proof is similar as above — we first prove that the 
private dynamic capacity formula simplifies for degradable channels and then prove additivity of the 
simplified formula for the Hadamard channels. 

Lemma 6 Suppose that a quantum channel Md is degradable. Then the private dynamic capacity formula 
simplifies as follows: 

where 

gxA^D) ^ max/ (yX; B)^ + X[H {B\X)^ - H {E\X)J\ + p[H {B)^ - H (E\X)J , 
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and oj-^^^^ is a state of the following form: 

and the states tp^^y are pure. 

Proof The inequality Pa,/j(A/'d) > ^a.^IA/d) follows by choosing each state p-^y in a^^^^ for the maxi- 
mization on the LHS to be the pure state 'ip^y that maximizes the RHS. Consider the following chain of 
inequalities: 

PxA^d) > I (YX; B)^ + \[I {Y; B\X)^ - I (Y; E\X)J + fi[I {YX; B)^ - I {Y; E\X)J 
= / {YX; B)^ + \[H {B\X)^ - H {B\XY)^ - H {E\X)^ + H {E\XY)^] 

+ li [H [B]^ - H {B\XY)^ - H {E\X)^ + H {E\XY)^] 
- / {YX; B)^ + \[H {B\X)^ - H {E\X)^] + p [H {B)^ - H {E\X)^] 
-.9a,m(A/d). 

We now prove that the other inequahty P\,^{NYi) < 5a,p(A/'d) holds. Suppose the state a-^^^^ maximizes 
P\,ii{-N't))- Consider a state a^^^^^ defined as follows: 



XYZBE _ 



E Px.y (^- y)Pz\x.Y {z\x, y) \x) (a:|^ ® \y) (yr ® k> {A^ ® U^^^'^'iviyJ. 



x,y,z 

where p^y — J2zPz\x,y iA^^y) 'fx.y,z i^ ^ spectral decomposition of each p^y in the state a^^^^. 
This state is a state of the form oj^^^^ with Y redefined to be YZ. Consider the following chain of 
inequalities: 

PxA^d) = I {YX; B)^ + A [/ {Y; B\X)^ - I {Y; E\X)^] + p[I {YX; B)^ - I {Y; E\X)^] 

= I {YZX; B)^ + \[I {YZ; B\X)^ - I {YZ; E\X)^ - [I {Z; B\YX)^ - I {Z; E\YX)^]] 

+ p [I {X; B)^ + / {YZ; B\X)^ - I {YZ; E\X)^ - [I {Z; B\YX)^ - I {Z; E\YX)J 
< I {YZX; B)^ + \[I {YZ; B\X)^ - I {YZ; E\X)^] 

+ p[I {X; B)^ + / {YZ; B\X)^ - I {YZ; E\X)J 
= / {YZX; B)^ + \[H {B\X)^ - H {B\XYZ)^ - H {E\X)^ + H {E\XYZ)J 

+ p[H {B)^ - H {B\XYZ)^ - H {E\X)^ + H {E\XYZ)J 
= I {YZX; B)^ + \[H {B\X)^ - H {E\X)^] + p [H {B)^ - H {E\X)^] 

The first equality follows by definition. The second equality follows from applying the chain rule for mu- 
tual information. The first inequality follows because / {Z; B\YX)^ — / {Z; E\YX)^ > for a degradable 
channel. The third equality follows by expanding the mutual informations, and the fourth equality follows 
because H {B\XYZ)^ = H {E\XYZ)^. The final inequality follows from the definition of gx.,ij.{J^D)- 

Lemma 7 Suppose that A/h is a quantum Hadamard channel and that Mu is a degradable quantum 
channel. Then the private dynamic capacity formula is additive: 

Pa,m(A/h <» A/d) - PxA^h) + ^a.m(A/d). 

Proof The inequality P^./iCA/k (8i A/d) > -Pa,p(Ah) + Pa,^(Ad) trivially holds by picking the state on 
the LHS to be a tensor product of the ones that individually maximize the RHS. Thus, we prove the 
non-trivial inequality P\,fj.{J^ii (8 Ad) < Pa,p(A/'h) + Px,fj.{J^D) for the channels in the hypothesis of the 
lemma. Consider a state of the form (j^'^BiEiB2E2 ^]^q^ arises from inputting a state of the form in 
Lemma [g] to the tensor product channel. Let i_ij^'^zvvEiB2E2 ]-,g |.]^g state that arises from applying the 
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first part of the degrading map of the Hadamard channel to system Bi. Then the following chain of 
inequalities holds: 

Pa,m(A/'h«)A/'d) 

= H (B^B^)^ - H {E^E2\YX)^ + X[H {B,B2\X)^ - H (^1^2!^) J + M [H (B.B^)^ - H {E^E^^^] 
= H (i?i), - H {E^\YX)^ + \[H {B,\X)^ - H {E,\X)^] + fi[H (Si), - H {E,\X)J 

+ H (B2IB1), - H {E2\YXEi)^ + X[H (B2IXB1), - H {E2\XEi)J + fi[H (B2IB1), - H {E2\XE^)^ 
< H (i?i), - H {E^\YX)^ + \[H {B,\X)^ - H {E,\X)^] + fi[H (B,)^ - H {E,\X)^] 

+ H (B2), - H {E2\YXW)^ + X[H {B2\XW)^ - H {E2\XW)J + fi[H (B2), - H {E2\XW)J 

= Pa,m(AAh)+Pa,m(A/d). 

The first equality follows from Lemma l6] because a Hadamard channel is degradable and thus the tensor 
product channel is degradable as well. The second equality follows by definition. The third equality 
follows by expanding with the chain rule for entropy. The first inequality follows from subadditivity 
(iJ {B2\Bi)^ < H (52)0-) ^-iid because there is a degrading map from Bi —>■ W and from W —> Ei (and 
so H{B2\XBi)^ < H{B2\XW)^ and H {E2\XW)^ < H(E2\XEi)^). The second inequality follows 
from the definition of g\.^^ and the final equality follows from Lemma [6| 



9 The private dynamic capacity region for special channels 

In the forthcoming subsections, we explicitly compute and plot the private dynamic capacity region for 
the qubit dephasing channel, the 1 — > iV cloning channel, and the quantum erasure channel. Interestingly, 
the ensemble required to achieve the boundary is the same for all three boundaries. The proofs of the 
theorems in this section are similar (though with subtle differences) to proofs from Refs. pHISD] , and 
they all appear in the appendix. 



9.1 Dephasing channels 

Consider the qubit dephasing channel Mp with dephasing probability p: 

Mp{p):={l-p)p + pA{p), (20) 

where A{p) :— (0|p|0)|0)(0| + (l|p|l)|l)(l| is the completely dephasing channel. The below theorem gives 
an explicit form for the private dynamic capacity region of this channel, and Figure [3] plots the region 
for a dephasing parameter p = 0.2. 

Theorem 4 The private dynamic capacity region Crps(A^) of a dephasing channel with dephasing pa- 
rameter p is the set of all R. P. and S such that 

R + P<1, (21) 

P + S<H2{iy)-H2{-fiiy,p)), (22) 

R + P + S<l-H2{^{i^,p)), (23) 

where v e [0, 1/2], H2 is the binary entropy function, and 



,{.,p)^\ + \f^wj(^^ry:i^y 
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Private classical communication rate 



Public classical communication rate 



Fig. 3 (Color online) The private dynamic triple trade-off for the qubit dephasing channel with dephasing parameter 
p = 0.2. P2P is in the direction of private-to-public transmission, SKD is in the direction of secret key distribution, OTP 
is in the direction of the one-time pad protocol, and PEPFP is the publicly-enhanced private father trade-off curve (this 
convention is the same in the forthcoming figures). The region exhibits a non-trivial resource trade-off only on the surface 
below the PEPFP trade-off curve in the direction of secret key distribution. 



9.2 Quantum cloning channels 

A 1 ^- A^ cloning channel [TUIISII^ITT] is the map induced by a universal cloning machine [22] • It approx- 
imately copies the input with a maximal fidelity independent of the input. The communication model 
for this channel gives all of the approximate clones to the receiver Bob and gives the environment of the 
map to Eve. The Kraus operators for a 1 — ^ iV cloning channel are as follows: 






N-1 



where A^ = N {N + I) /2 and 



{\jr^\N-j,j)}f^„ 



where \N — j,j) denotes a normalized state on an A'^-qubit system that is a uniform superposition of 
computational basis states with N — j "zeros" and j "ones." Figure |4] plots the capacity region for a 
1 — > 10 cloning channel, and the proof of the below theorem appears in the appendix. 

Theorem 5 The private dynamic capacity region Crps(A/'cO of a 1 ~¥ N quantum cloning channel is 
the set of all R, P, and S such that 



R + P <l-\osN 



A 



1 ^ 

— Vilogi, 



P + S<H{\, (m) /An) - H (77, {pL) /An) , 
R + P + S<\og{N + l)-H{rj, {pi) /An) , 



where H is the entropy function H (• 



E.(-)iog(-), 



An^N{N + 1)/2, 
X, (fj.) = (A - 2i)fi + i for <i < N, 
?7j(^) = (A- 1 -2i)/i + i + 1 for < z < A - 1, 
M e [0, 1/2] . 
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Fig. 4 (Color online) The private dynamic capacity region for a 1 — > 10 cloning channel. The region exhibits a non-trivial 
resource trade-off only on the surface below the PEPFP trade-off curve in the direction of secret key distribution. 



9.3 Quantum erasure channel 

Below we show that the private dynamic capacity region simplifies if the quantum channel is a quantum 
erasure channel. A quantum erasure channel with erasure parameter e is the following map: 

K{p)^il-e)p + e\e){e\. 

Notice that the receiver can perform a measurement {|0) (0| + |1) (1| , |e) (e|} and can learn whether the 
channel erased the state. The receiver can do this without disturbing the state in any way. An isometric 



extension U, 



A'^BE 



AA' 



M 



of it acts as follows on a purification 1-0) of the state p 



^A' . 



jjA'^BE 



|^)^-^'=Vr^|V^)-^^|e)^ + yi|V^)^^|e)^ 



In the above representation, we see that the erasure channel has the interpretation that it hands the 
input to Bob with probability 1 — e while giving an erasure flag |e) to Eve, and it hands the input to Eve 
with probability e while giving the erasure flag to Bob. Figure [5] plots the region for an erasure channel 
with erasure parameter e = 1/4, and the proof of the below theorem appears in the appendix. 

Theorem 6 The private dynamic capacity region C^psiMe) of a quantum erasure channel Af^ is the set 
of all R, P , and S such that 

i? + P<(l-e), 
P + S<{l~2e)H2 ip) , 
R + P + S <l-e-eH2{p), 

where p G [0, 1/2]. 

10 Conclusion 

This paper completes the information-theoretic treatment of the Collins-Popescu analogy between classi- 
cal communication, quantum communication, entanglement and public classical communication, private 
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Private classical 



Public classical communication rate 



Fig. 5 (Color online) The private dynamic capacity region for a quantum erasure channel with erasure parameter e = 1/4. 
The erasure channel does not have a non-trivial trade-off, i.e., time-sharing between different protocols is the optimal 
strategy. 



classical communication, and secret key (at least for the case of channels). Our main theorem gives the 
private dynamic capacity region of a quantum channel. The catalytic information theoretic converse proof 
technique again proves to be useful in obtaining a simplified converse proof. The private dynamic capac- 
ity region dramatically simplifies for entanglement-breaking channels, Hadamard channels, and erasure 
channels, so that we can actually plot the region for several examples of these channels. 

The open question remaining is to complete the Collins-Popescu analogy for the case of a static 
resource (a bipartite state shared between Alice and Bob) . We have determined the static region for the 
classical-quantum-entanglement trade-off [30 , and this first step should help in completing the analogy. 
Another ambitious open question would be to solve the quintuple trade-off between public classical 
communication, private classical communication, quantum communication, entanglement, and secret key, 
of which the regions in this paper are merely a projection. The catalytic information-theoretic converse 
proof technique should be helpful in obtaining a capacity theorem. Completing this larger trade-off 
problem could further our understanding of the nature of these different resources and their interaction 
with a noisy quantum resource. 
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A Proofs 

Proof (Theoreml^ (Dephasing channel region)) We first prove that it is suificient to consider an ensemble of the following 
form to characterize the boundary points of the region: 



1-u . 



I A' 



- io> (or ® io> (or io> (or + -^- io> (or ® ii> (ir ® ii> (ir + 

l-u 



I A' 



2 ii> (ir ® io> (or ® io> (or + - ii> (ir ® ii> (ir ® ii> (ir , m 

where u S [0,1/2]. We can use the simplified form of the private dynamic capacity formula in Lemma [g] because the 
dephasing channel is a degradable channel. Consider a classical-quantum state with a finite number NxNy of conditional 
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density operators (f>^ yi 

pXYA- ^ Y^ Y^p^{x)pY^x{y\x)\x){xf®\y){y\''®4>^[y. 

A' 



Let 0^ denote the conditional states if X is known but Y is not 



'Px = J2 PY\x(.y\x)<l>iy 

It suffices for these states to be diagonal in the dephasing basis because the channel output entropy when conditioned on 
X can only be larger while the environment's entropy when conditioned on X remains constant (see Lemma 9 of Ref. [H]). 
We can form a new classical-quantum state with quadruple the number of conditional density operators by applying all 
four Pauli operators to the original conditional density operators: 






4 

x^O y=0 j=0 

where cro = I, o^i = o^z, (T2 = crx and 0-3 = ay are the Pauli matrices. Let pXYBE ^^^ ^XYJBE j^g ^j^g respective states 
after sending the A' system of p^^ and a^^ "^ through the isometric extension C/j^ ~*^^ of the dephasing channel. 
Consider the following chain of inequalities that holds for all A, /i > 0: 

H (B)^ - H iB\YX)^ + x[h iB\X)^ - H (E\X) ^] + p[h (B)^ - H (E\X)^] 

= H [B)^ - H {B\YXJ)^ + \[H {B\XJ)^ - H (B|X J) J + p[h (B)^ - H iE\XJ)^] 

< H (B)^ - H {B\YXJ)^ + \[H (B\XJ)^ - H (S|X J) J +^,[H [B]^ ~ H {E\XJ)^] 
= 1-H {B\YXJ)^ +\[H {B\XJ)^ - H (E\XJ)^] +tJi[l~H (E\XJ)^] 

= l + p+ Y. px(x) [-H (BW(0.,,) + ^H (BW(^^) -(\ + l^)H (B)^e(^^)] 

x = l 

< 1 + /. + max [-H (i?)^(^^^) + AH (B)^( ,^) -{\ + ^.)H (i?V(^^)] 
= l + p-H (B)^(^._^) + AH {i?)^(^j) - (A + ^) H (i?)^c(^.) 

= l + p + \H (BW(^.) - (A + /.) H (S)^e(^.) 

= 1 + A [h {B)^(^. ) - H (i?)^e(^.)] + ^ [1 - H (SW.(^. )] . 

The first equality follows because conditioning on J does not change the conditional entropies. That is, the conditional 
entropies H (B\X) and H {B\YX) are invariant under a Pauli operator on the input state that commutes with the channel. 
Furthermore, a Pauli operator on the input state does not change the eigenvalues for the output of the dephasing channel's 
complementary channel: E[{E)j^^,-^,ai-^-^ = H{E)j^^,,ai^. The first inequality follows because entropy is concave, i.e., 

the local state a^ is a mixed version of p^ . The second equality follows because 

H(B)^B =^( E \PX {x)py\X {y\x)<T,<t>^^yaA =H [EPx(x)py,x{?/k)//2| =1. 
\x,y,3 J \x,y J 

The third equality follows because the system X is classical and conditioning on J does not change the entropies. The 
second inequality follows because the maximum value of a realization of a random variable is not less than its expectation. 
The fourth equality follows be defining the ensemble with a * to be the optimal ensemble with respect to the maximization 
over X. The fifth equality follows from a further optimization: it is better to choose the pure states 0J ,, to be pure states 
in the basis of the dephasing channel. The final equality follows by rearranging terms. The final state (/)J then has the 

form u |0) (0| + {1 — v)\l) (1| for some value of v because ij>x i^ diagonal in the dephasing basis. The three other states 
(tx^Jtx, (^y4'%'^y, and ctz4>%'^z have a similar form, but (j>% = az<i>*x"z and rrx'Px'^x = '^Y'Px'^Y- Thus, it suffices 
to choose the state t/ij and its bit-fiipped version, and the variable Y needs only have distribution {u, 1 — u) because of 
the particular form of <j)*. Thus, an ensemble of the kind in l |24| is sufficient to attain a point on the boundary of the 
region. Evaluating the entropic quantities in Theorem[T]on a state of the above form gives the expression for the region in 
Theorem |4] 

Proof (Theorem [5^ (Cloning channel region)) We first prove that the same ensemble as in ( |24[ l suffices for achieving the 
limits of the region. We exploit the following classical-quantum states: 

pXYA' ^ J2px {x)pyix {y\x) \x) (x|^ \y) (^r <,, 
x,y 

^XYIA' ^ J2 \px (x) \x) (x|^ \y) (?;r ® \i) {i\' ® {<rf),t>C(af' ), 

x.i 
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where the states 4'x,y ^^^ pure, and let p^YBE ^^j^^ ^XYIBE y^^ ^j^g states obtained by transmitting the A' system through 
the isometric extension of the erasure channel. Let ct^ ^ = ^yPylx (s/|^) I?/) (?/l ®4'x y The cloning channel is degradable 
and covariant I8I10I . the latter meaning that the following relationships hold for any input density operator a and any 
unitary V acting on the input system A': 

Afci (VaV''^ = RvMci {<y) R\r, 

where Ry and Sy are higher-dimensional irreducible representations of the unitary V on the respective systems B and E. 
The state a^ is equal to the maximally mixed state on the symmetric subspace for the following reasons: 

aB = _v-ci (^'^') = -^Ci f ^ j = A/bi (j VujV'< dv\ = j RvM {lo) Ry^ dV = j^ f2 I*) ^^l'' ' (^5) 

where the fourth equality exploits the linearity and covariance of the cloning channel A/ci- Consider the following chain of 
inequalities: 

H (B)p - H iB\YX)^ + \[h iB\X)^ - H (S|X) J + M [^ {B)p - H {E\X)^] 
= i^^ + l)H (B)^ - H {B\YX)^ + \H (B|X)^ ~(X + f,]H iE\X)^ 
= {^l + l)H (B)^ - H (B\YXI)^ + XH {B\XI)^ -{X + t^)H (E\XI)^ 
<{^l + l)H (B)^ - H (B\YXI)^ + XH (B\XI)^ - (A + ^l) H (E\XI)^ 

= {^l + l) log (N + l)-Y,Px (x)py\x (y\x) H (^\ + ^Px {x) [xH (BV(,^') - (A + /.) H (S)^.(,a') 

< (m + 1) log (JV + 1) - 1/ (^^) + A// (BW(,.) - (A + m) ^ (^)Ar<=(aj) 

= 1 _ logAT + __ ^iiogi + A [^(i?)^(,.) - H (EWc(,.)] + M [log {N + l)-H {E) 



The first equality follows by rearranging terms. The second equality follows because the conditional entropies are invariant 
under unitary transformations: 

^(■S)fl pBflt =H{B)^n, H{E) t =H{E)^E, 

f^T I 3^ ^C7: ^x Oct ■ P^ Oct ■ ^x 

where Re- and Saj are higher-dimensional representations of Cj on systems B and E, respectively. The first inequal- 
ity follows because entropy is concave, i.e., the local state a^ is a mixed version of p^ . The third equality follows 
because ||25| implies that H(B)^b = log (Af -|- 1), from applying unitary covariance of the cloning channel to the term 
H {B\Y xTj^ = Ylx yPx ix)pY\x iy\x) H (B)j^/^ \ (all pure states have the same output entropy — thus, it does not 
matter which particular pure states we input), and from expanding the conditional entropies H {B\XI)^ and H {E\XI)^. 
The second inequality follows because the maximum value of a realization of a random variable is not less than its expec- 
tation. The final equality follows by observing that log (A'' + 1) — H ( -J— j = 1 — logAf + -r — X]i=o *log j. The entropies 
H(B)j^(^»\ and H{E)j^cr^,\ depend only on the eigenvalues of the input state a* by the covariance of both the cloning 
channel and its complement. We can therefore choose a* to be diagonal in the {|0), |1)} basis of A' , and without loss of 
generality, suppose these eigenvalues are equal to v and 1 — v. The ensemble defined to consist of a* and Xcr*X assigned 
equal probabilities then saturates the upper bound. The final analytic form in the statement of the theorem follows by 
evaluating the entropies and these calculations are similar to calculations available in Section V-B of Ref. |11| . 

Proof of Theorem [61 (Erasure channel region). We prove Theorem [g] in several steps. 

Lemma 8 The private dynamic capacity formula in j"J5P simplifies as follows for a quantum erasure channel Mt : 

Px.^{Ne)= max (l-e) + A(l-2e)H2(p)-t-M({l-f)-f^2(p)). (26) 

pe[o,i/2] 

Thus, the "one-shot" dynamic capacity region of a quantum erasure channel is as Theorem\d\ states. 

Proof We can use the simplified form of the private dynamic capacity formula in Lemma [6] because the quantum erasure 
channel is a degradable channel. We exploit the following classical-quantum states: 



pXYA =J2px {x)pYix iy\x) \x) (x|^ \y) (yl^ ® </,^,,, 
x,y 

XYIA' ^ J2 Ipx (x) \x) (x|^ \y) (?;r ® \i) {i\' ® {<rf),t>C(af' ), (27) 



4 

X.l 
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and let p^^BE ^^^^ ^xyibe ^^ ^j^^ states obtained by transmitting the A' system through the isometric extension of the 
erasure channel. Let u-^ = YlyPY\x (j/l^) 't'xy Furthermore, let the eigenvalues of the state a^ with highest entropy on 
system A' be p and 1 — p. Consider that the following chain of inequalities holds for any state p^YBE. 

H (B)^ - H {B\YX)^ + x[h {B\X)^ - H iE\X)^] + ^l[H [B) ^ - H (E\X)^] 
= if^ + l)H (B)^ - H iB\YX)^ + \H {B\X)^ - (A + ^) H (E\X)^ 
= {p + l)H (B\Xe)p - H {B\YXXe)p + XH {B\XXe)p - {X + fi) H {E\XXe)p 
= {,^ + l)(l~e)H{A')^-{l-e)H{A'\YX)^ + X(l-e)H{A'\X)^-{X + ,^)eH{A'\X)^ 
= {,i + l)(l-e)H {A')^ + [A (1 - .) - (A + m) e] H {A'\X)^ 
= {,, + l)(l-e)H (A')^ + [A (1 - e) - (A + m) e] H {A'\XI)^ . 

The first equality follows by rearrnging terms. The second equality follows by incorporating the classical erasure flag 
variable. The third equality follows by exploiting the properties of the quantum erasure channel. The fourth equality 
follows by rearranging terms and because the entropy H{A'\YX) vanishes (the state on A' conditioned on both X and 
Y is pure). The fifth equality follows because H {A'\X) = H (A'\XI)^. Continuing, 

< (m + 1) (1 - .) H (A')^ + [A (1 - e) - (A + m) e] H {A'\XI)^ 

= (m + 1) (1 - €) + [A (1 - e) - (A + m) e] H {A'\XI)^ 

= (m + 1) (1 ^ .) + [A (1 _ .) - (A + A.) e\Y,Px (x) H {A')^^, 

X 

<{p + l)(l-e) + [A (1 - .) - (A + m) a H (A')^. 
= (1 - €) + A (1 - 2e) H2 (p) + M ((1 - e) - eH2 (p)) . 

The first inequality follows because the unconditional entropy of the state p is always less than that of the state a. The 
first equality follows because H(A')^ = 1. The second equality follows by expanding the conditional entropy. The second 
inequality follows because an average is always less than a maximum. The final equality follows by rearranging terms and 
by plugging in the eigenvalues of a* . The form of the private dynamic capacity formula then follows because this chain of 
inequalities holds for any input ensemble. 

Lemma 9 It suffices to consider the set of X, fi > for which 

A(l-2e) > fie. 

Otherwise, we are just maximizing the public classical capacity, which we know from Ref. ;'5? is equal to 1 — e. 

Proof Consider rewriting the expression in l |26| as follows: 

max (1 - e) + ^ (1 - e) + [A (1 - 2e) - fj,e] H2 (p) . 

pe[o,i/2] 

Suppose that the expression in square brackets is negative, i.e., 

A(l - 2e) < fie. 

Then the maximization over p simply chooses p = so that H2 (p) vanishes and the negative term disappears. The resulting 
expression for the private dynamic capacity formula is 



(!_,) + ,. (1 _ ,) ^ 



which corresponds to the following region 



R + P <l~e, 
P + S<0, 
R + P + S<l-e. 

The above region is equivalent to a translation of the unit resource capacity region to the public classical capacity rate 
triple (1 — e, 0, 0). Thus, it suffices to restrict the parameters A and p as above for the quantum erasure channel. 

Lemma 10 The following additivity relation holds for two quantum erasure channels Mt with the same erasure parameter 
e; 

Pa.mCA/". ® A/'O = Pa,m(M) + PxA^^)- 
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Proof We prove the non-trivial inequality Px^^iMa ® Me) < Px.fiiMt) + Pa./jCA/'e). We define the following states: 

pXYA'.A', ^ J2px {X)PYIX (yk) k> (^l"" ® \y) (^r <i^^ 



x.y 



^XYB^E^B^E, ^ ^A^.^B^E, ^^A^,^B,E,^^xYA[A',s^^ 

and we suppose that p^^AiA2 jg ^jjg g^g^^g that maximizes P\.fj,{Me (SMe)- Consider the following equality: 

H{BiB2)^-H{BiB2\YX)^+X{H{BiB2\X)^~H{ErE2\X)J+fi{H{BiB2)^-H{E^E2\X)J 
= (1 - ef H {A[A'2)^ + e(l-e)[H {A[) ^ + H (A'^)^) 

- . (1 - e) (// {A[\YX)^ + H {A'2\YX)^) 

+ A [(1 - e)2 H {A[A^\X)^ + e (1 - .) (h (A'lIX)^ + H (A^|X)^)] 

- A [.2/f (A'lA^X)^ + e (1 - .) (h (A'lIX)^ + H (A^|X)^)] 
+ f.[{l-efH{A[A'2)^ + e{l^e)[H{A[)^ + H{A'2)^)] 

- M [.2h (A'lA^X)^ + , (1 _ ,) (/^ Kl^)p + ff (^21^)^)] ■ 

The above equality follows by exploiting the properties of the quantum erasure channel and because the entropy _ff ( A j Aj | y X) 
0. Continuing, the above quantity is less than the following one: 

<2(l-e)-e(l-e){H {A[\YXIJ)^ + H (A^|yX/j) J 
+ A (1 - 2e) H (A'lAalX/j)^ 

+ M [2 (1 - e) - e^H (A;A^|X/J)^ _ , (i _ e) (H {A\XIJ)^ - H (A^|X/J) J] 
= 2(1-.) 

+ A (1 - 2e) {H {A[\XIJ)^ + H {A'2\XIJ)J 
+ A* [2 (1 - e) - e (H {A[\XIJ)^ - H (A^|X/J) J] 
-e(l-e){H {A[\YXIJ)^ + H {A'2\YXIJ)J 
-[{X{l-2e)~^^e^)I{A[■,A'2\XIJ)J 
< Pa,m (A^O + ^A,M (A/;) -e{l-e){H {A{\YXIJ)^ + H (A^|yX7j)^) 

-[(A(l-2e)-/.e2)7(A'i;A'2|X/j)J 
<PA,M(A^0 + n,M(A4). 

The first inequality follows from similar proofs we have seen for a state a of t he fo rm in | |27^ . The first equality follows 
by rearranging terms. The second inequality follows from the form of Dx ^ in ([26Jl. The final inequality follows because 
Lemma^states that it is sufficient to consider A(l — 2e) > pe. Note that this condition implies that 

A(l- 2e) > ^le^, 

and hence that the quantity in square brackets in the line above the last one is positive. 
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